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Remarks 

Claims 1-45 are pending. 

Response to Arguments 

1 . Applicant's arguments with respect to claims 1-45 have been considered but are 
moot in view of the new ground(s) of rejection. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

2. Claims 1-5, 9-15, 26-33, and 35-44 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Murphy (U.S. Patent 6,006,266) in view of Aura (U.S. Patent 
6,947,725). 

Regarding Claim 1, 

Murphy discloses a method of managing a communication with a 
device over a network, comprising: 

Receiving a request from the device, wherein the request includes 
associated information (Column 9, line 22 to Column 10, line 64); 
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Automatically determining at least one level of trust based, in part, 
on the associated information (Column 9, line 22 to Column 10, line 64); 
and 

Determining at least one device signature for the device based on 
the at least one level of trust, and independent of user authentication 
(Column 9, line 22 to Column 10, line 64); 

But may not explicitly disclose that the device is a mobile device or 
a plurality of different levels of trust. 

Aura, however, discloses that the device is a mobile device and 
determining at least one level of trust from a plurality of different levels of 
trust based, in part, on associated information (Column 5, line 58 to 
Column 6, line 13; and Column 7, line 42 to Column 8, line 23). It would 
have been obvious to one of ordinary skill in the art at the time of 
applicant's invention to incorporate the mobile authentication system of 
Aura into the session management system of Murphy in order to allow a 
device to obtain authentication with new base stations and gateways with 
reduced delay, while allowing the device to maintain multiple levels of trust 
via credentials and signatures, such that the device can access multiple 
levels of access to content, resources, etc., even when the device uses 
multiple communication media and switches between such communication 
media. 
Regarding Claim 2, 
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Murphy as modified by Aura discloses the method of claim 1 , in 
addition, Murphy discloses receiving gateway information, wherein the 
' gateway information is associated with a gateway for the mobile device; 
and determining the at least one level of trust based, in part, on the 
associated information and the gateway information (Column 9, line 22 to 
Column 10, line 64); and Aura discloses that the gateway is associated 
with a carrier gateway for the mobile device (Column 4, lines 32-65). 

Regarding Claim 3, 

Murphy as modified by Aura discloses the method of claim 1 , in 
addition, Murphy discloses that the associated information comprises at 
least one of a device identifier, user agent information, and an indication 
that the mobile device is enabled to accept a cookie (Column 9, line 22 to 
Column 10, line 64); and Aura discloses that the associated information 
comprises at least one of a device identifier, user agent information, and 
an indication that the mobile device is enabled to accept a cookie (Column 
13, line 64 to Column 15, line 6). 

Regarding Claim 4, 

Murphy as modified by Aura discloses the method of claim 3, in 
addition, Aura discloses that the associated information further comprises 
at least one of a gateway group identifier and a subscription identifier 
(Column 13, line 64 to Column 15, line 6). 

Regarding Claim 5, 
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Murphy as modified by Aura discloses the method of claim 1 , in 
addition, Murphy discloses automatically determining a second level of 
trust based, in part, on the associated information, and determining a 
second device signature for the mobile device based on the second level 
of trust, and independent of user authentication (Column 9, line 22 to 
Column 10, line 64); and Aura discloses automatically determining a 
second level of trust from the plurality of different levels of trust based, in 
part, on the associated information, and determining a second device 
signature for the mobile device based on the second level of trust, and 
independent of user authentication (Column 5, line 58 to Column 6, line 
13; and Column 7, line 42 to Column 8, line 23). 
Regarding Claim 9, 

Murphy as modified by Aura discloses the method of claim 1 , in 
addition, Murphy discloses that determining the at least one level of trust 
further comprises, if the associated information indicates the mobile 
device is enabled to use a URL, determining a third level of trust (Column 
9, line 22 to Column 10, line 64). 
Regarding Claim 10, 

Murphy as modified by Aura discloses the method of claim 1 , in 
addition, Murphy discloses that determining at least one device signature 
further comprises, if a first level of trust is determined, determining a first 
tier device signature based, in part, on a hash of at least one of a 
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subscription identifier, a gateway group identifier, a user agent identifier, 
and a time stamp (Column 9, line 22 to Column 10, line 64); and Aura 
discloses that determining at least one device signature further comprises, 
if a first level of trust is determined, determining a first tier device signature 
based, in part, on a hash of at least one of a subscription identifier, a 
gateway group identifier, a user agent identifier, and a time stamp 
(Column 9, line 43 to Column 10, line 27; and Column 13, line 64 to 
Column 15, line 6). 

Regarding Claim 11, 

Murphy as modified by Aura discloses the method of claim 1 , in 
addition, Murphy discloses that determining at least one device signature 
further comprises, if a second level of trust is determined, determining a 
second tier device signature based, in part, on a hash of at least one of a 
cookie, a gateway group identifier, a user agent identifier, and a time 
stamp (Column 9, line 22 to Column 10, line 64); and Aura discloses that 
determining at least one device signature further comprises, if a second 
level of trust is determined, determining a second tier device signature 
based, in part, on a hash of at least one of a cookie, a gateway group 
identifier, a user agent identifier^ and a time stamp (Column 9, line 43 to 
Column 10, line 27; and Column 13, line 64 to Column 15, line 6). 

Regarding Claim 12, 
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Murphy as modified by Aura discloses the method of claim 1, in 
addition, Murphy discloses that determining at least one device signature 
further comprises, if a third level of trust is determined, determining a third 
tier device signature based, in part, on a hash of at least one of a gateway 
group identifier, a user agent identifier, a server identifier, a process 
identifier, a random number, and a time stamp (Column 9, line 22 to 
Column 10, line 64); and Aura discloses that determining at least one 
device signature further comprises, if a third level of trust is determined, 
determining a third tier device signature based, in part, on a hash of at 
least one of a gateway group identifier, a user agent identifier, a server 
identifier, a process identifier, a random number, and a time stamp 
(Column 9, line 43 to Column 10, line 27; and Column 13, line 64 to 
Column 15, line 6). 
Regarding Claim 13, 

Murphy as modified by Aura discloses the method of claim 12, in 
addition, Murphy discloses that determining the third tier device signature 
further comprises including the third tier device signature in a munged 
URL (Figure 5; and Column 9, line 22 to Column 10, line 64). 
Regarding Claim 14, 

Murphy as modified by Aura discloses the method of claim 1, in 
addition, Aura discloses that determining at least one device signature 
further comprises employing a hash function selected from at least one of 
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a message digest, a SHA, a DES, triple-DES, HAVAL, RIPEMD, and Tiger 
hash function (Column 14, lines 58-62). 
Regarding Claim 15, 

Murphy as modified by Aura discloses the method of claim 1 , in 
addition, Murphy discloses expiring the at least one device signature 
based, in part, on a predetermined period of time associated with each of 
the at least one device signature (Column 8, lines 24-28; and Column 17, 
lines 15-40); and Aura discloses expiring the at least one device signature 
based, in part, on a predetermined period of time associated with each of 
the at least one device signature (Column 9, line 43 to Column 10, line 
27). 

Regarding Claim 26, 

Murphy discloses a server for managing a communication with a 
device over a network, comprising: 

A transceiver for receiving a request from the device and for 
sending at least one device signature to the device (Column 9, line 22 to 
Column 10, line 64); and 

A transcoder that is configured to perform actions including: 

Receiving the request from the device, wherein the request 
includes associated information (Column 9, line 22 to Column 10, line 64); 
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Automatically determining at least one level of trust based, in part, 
on the associated information (Column 9, line 22 to Column 10, line 64); 
and 

Determining the at least one device signature for the device based 
on the at least one level of trust, wherein the at least one device signature 
is independent of user authentication (Column 9, line 22 to Column 10, 
line 64). 

But may not explicitly disclose that the device is a mobile device or 
a plurality of different levels of trust. 

Aura, however, discloses that the device is a mobile device and 
determining at least one level of trust from a plurality of different levels of 
trust based, in part, on associated information (Column 5, line 58 to 
Column 6, line 13; and Column 7, line 42 to Column 8, line 23). It would 
have been obvious to one of ordinary skill in the art at the time of 
applicant's invention to incorporate the mobile authentication system of 
Aura into the session management system of Murphy in order to allow a 
device to obtain authentication with new base stations and gateways with 
reduced delay, while allowing the device to maintain multiple levels of trust 
via credentials and signatures, such that the device can access multiple 
levels of access to content, resources, etc., even when the device uses 
multiple communication media and switches between such communication 
media. 
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Regarding Claim 27, 

Murphy as modified by Aura discloses the server of claim 26, in 
addition, Murphy discloses receiving gateway information, wherein the 
gateway information is associated with a gateway for the mobile device; 
and determining the at least one level of trust based, in part, on the 
associated information and the gateway information (Column 9, line 22 to 
Column 10, line 64); and Aura discloses that the gateway is associated 
with a carrier gateway for the mobile device (Column 4, lines 32-65). 

Regarding Claim 28, 

Murphy as modified by Aura discloses the server of claim 26, in 
addition, Murphy discloses that determining at least one device signature 
further comprises, if a first level of trust is determined, determining a first 
tier device signature based, in part, on a hash of at least one of a 
subscription identifier, a gateway group identifier, a user agent identifier, 
and a time stamp (Column 9, line 22 to Column 10, line 64); and Aura 
discloses that determining at least one device signature further comprises, 
if a first level of trust is determined, determining a first tier device signature 
based, in part, on a hash of at least one of a subscription identifier, a 
gateway group identifier, a user agent identifier, and a time stamp 
(Column 9, line 43 to Column 10, line 27; and Column 13, line 64 to 
Column 15, line 6). 

Regarding Claim 29, 
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Murphy as modified by Aura discloses the server of claim 26, in 
addition, Murphy discloses that determining at least one device signature 
further comprises, if a second level of trust is determined, determining a 
second tier device signature based, in part, on a hash of at least one of a 
cookie, a gateway group identifier, a user agent identifier, and a time 
stamp (Column 9, line 22 to Column 10, line 64); and Aura discloses that 
determining at least one device signature further comprises, if a second 
level of trust is determined, determining a second tier device signature 
based, in part, on a hash of at least one of a cookie, a gateway group 
identifier, a user agent identifier, and a time stamp (Column 9, line 43 to 
Column 10, line 27; and Column 13, line 64 to Column 15, line 6). 
Regarding Claim 30, 

Murphy as modified by Aura discloses the server of claim 26, in 
addition, Murphy discloses that determining at least one device signature 
further comprises, if a third level of trust is determined, determining a third 
tier device signature based, in part, on a hash of at least one of a gateway 
group identifier, a user agent identifier, a server identifier, a process 
identifier, a random number, and a time stamp (Column 9, line 22 to 
Column 10, line 64); and Aura discloses that determining at least one 
device signature further comprises, if a third level of trust is determined, 
determining a third tier device signature based, in part, on a hash of at 
least one of a gateway group identifier, a user agent identifier, a server 
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identifier, a process identifier, a random number, and a time stamp 
(Column 9, line 43 to Column 10, line 27; and Column 13, line 64 to 
Column 15, line 6). 
Regarding Claim 31, 

Murphy as modified by Aura discloses the server of claim 26, in 
addition, Murphy discloses that determining the at least one level of trust 
comprises determining a first level of trust based at least one of a gateway 
group identifier, a subscription identifier, a user agent, and a security level 
associated with the request from the mobile device (Column 9, line 22 to 
Column 10, line 64); and Aura discloses that determining the at least one 
level of trust comprises determining a first level of trust based at least one 
of a gateway group identifier, a subscription identifier, a user agent, and a 
security level associated with the request from the mobile device (Column 
9, line 43 to Column 10, line 27; and Column 13, line 64 to Column 15, line 
6). 

Regarding Claim 32, 

Murphy as modified by Aura discloses the server of claim 26, in 
addition, Murphy discloses that determining the at least one level of trust 
comprises determining a second level of trust based at least one of a 
gateway identifier, a user agent, and whether the mobile device is enabled 
to accept a cookie (Column 9, line 22 to Column 10, line 64); and Aura 
discloses that determining the at least one level of trust comprises 
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determining a second level of trust based at least one of a gateway 
identifier, a user agent, and whether the mobile device is enabled to 
accept a cookie (Column 9, line 43 to Column 10, line 27; and Column 13, 
line 64 to Column 15, line 6). 
Regarding Claim 33, 

Murphy as modified by Aura discloses the server of claim 26, in 
addition, Murphy discloses that determining the at least one level of trust 
comprises determining a third level of trust if the mobile device is enabled 
to interact with a URL (Column 9, line 22 to Column 10, line 64). 
Regarding Claim 35, 

Murphy discloses a system for managing a communication with a 
device over a network, comprising: 

The device configured to provide information associated with the 
mobile device (Column 9, line 22 to Column 10, line 64); and 

A server, coupled to a gateway, that is configured to receive the 
associated information and to perform actions, including: 

Automatically determining at least two levels of trust from a plurality 
of different levels of trust based, in part, on the associated information 
(Column 9, line 22 to Column 10, line 64); and 

Initially determining at least two different device signatures for the 
device, wherein the at least two device signatures are each determined 
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independent of user authentication (Column 9, line 22 to Column 10, line 
64); 

But may not explicitly disclose that the device is a mobile device, 
that the gateway is a carrier gateway, or a plurality of different levels of 
trust. 

Aura, however, discloses that the device is a mobile device; 
determining at least one level of trust from a plurality of different levels of 
trust based, in part, on associated information; at least two different device 
signatures being based on a different one of the at least two different 
levels of trust; and a carrier gateway (Column 4, lines 32-65; Column 5, 
line 58 to Column 6, line 13; and Column 7, line 42 to Column 8, line 23). 
It would have been obvious to one of ordinary skill in the art at the time of 
applicant's invention to incorporate the mobile authentication system of 
Aura into the session management system of Murphy in order to allow a 
device to obtain authentication with new base stations and gateways with 
reduced delay, while allowing the device to maintain multiple levels of trust 
via credentials and signatures, such that the device can access multiple 
levels of access to content, resources, etc., even when the device uses 
multiple communication media and switches between such communication 
media. 
Regarding Claim 36, 
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Murphy as modified by Aura discloses the system of claim 35, in 
addition, Murphy discloses that determining the at least two device 
signatures further comprises determining a tier 1 device signature based, 
in part, on a hash of at least one of a subscription identifier, a gateway 
group identifier, a user agent identifier, and a time stamp (Column 9, line 
22 to Column 10, line 64); and Aura discloses that determining the at least 
two device signatures further comprises determining a tier 1 device 
signature based, in part, on a hash of at least one of a subscription 
identifier, a gateway group identifier, a user agent identifier, and a time 
stamp (Column 9, line 43 to Column 1 0, line 27; and Column 1 3, line 64 to 
Column 15, line 6). 
Regarding Claim 37, 

Murphy as modified by Aura discloses the system of claim 35, in 
addition, Murphy discloses that determining the at least two device 
signatures further comprises determining a tier 2 device signature based, 
in part, on a hash of at least one of a cookie, a gateway group identifier, a 
user agent identifier, and a time stamp (Column 9, line 22 to Column 10, 
line 64); and Aura discloses that determining the at least two device 
signatures further comprises determining a tier 2 device signature based, 
in part, on a hash of at least one of a cookie, a gateway group identifier, a 
user agent identifier, and a time stamp (Column 9, line 43 to Column 10, 
line 27; and Column 13, line 64 to Column 15, line 6). 
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Regarding Claim 38, 

Murphy as modified by Aura discloses the system of claim 35, in 
addition, Murphy discloses that determining the at least two device 
signatures further comprises determining a tier 3 device signature based, 
in part, on a hash of at least one of a gateway group identifier, a user 
agent identifier, a server identifier, a process identifier, a random number, 
and a time stamp (Column 9, line 22 to Column 10, line 64); and Aura 
discloses that determining the at least two device signatures further 
comprises determining a tier 3 device signature based, in part, on a hash 
of at least one of a gateway group identifier, a user agent identifier, a 
server identifier, a process identifier, a random number, and a time stamp 
(Column 9, line 43 to Column 10, line 27; and Column 13, line 64 to 
Column 15, line 6). 

Regarding Claim 39, 

Murphy as modified by Aura discloses the system of claim 38, in 
addition, Murphy discloses that the tier 3 device signature is provided to 
the mobile device through a munged URL (Column 9, line 22 to Column 
10, line 64). 

Regarding Claim 40, 

Murphy as modified by Aura discloses the system of claim 35, in 
addition, Aura discloses a carrier gateway, coupled to the mobile device, 
that is configured to receive the associated information and provide the 
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associated information and a gateway information related to the carrier 
gateway (Column 4, lines 32-65; and Column 13, line 64 to Column 15, 
line 5). 
Regarding Claim 41, 

Murphy discloses a computer readable storage medium for 
communicating with a device, the computer readable storage medium 
having computer executable instructions stored thereon that when 
installed into a computing device enable the computing device to perform 
actions, comprising: 

Receiving a request from the device, wherein the request includes 
associated information (Column 9, line 22 to Column 10, line 64); and 

Sending at least one device signature to the device based on at 
least one level of trust that is determined, in part, using the associated 
information, and wherein the at least one device signature is determined 
independent of user authentication (Column 9, line 22 to Column 10, line 
64); 

But may not explicitly disclose that the device is a mobile device or 
a plurality of different levels of trust. 

Aura, however, discloses that the device is a mobile device and 
determining at least one level of trust from a plurality of different levels of 
trust based, in part, on associated information (Column 5, line 58 to 
Column 6, line 13; and Column 7, line 42 to Column 8, line 23). It would 
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have been obvious to one of ordinary skill in the art at the time of 
applicant's invention to incorporate the mobile authentication system of 
Aura into the session management system of Murphy in order to allow a 
device to obtain authentication with new base stations and gateways with 
reduced delay, while allowing the device to maintain multiple levels of trust 
via credentials and signatures, such that the device can access multiple 
levels of access to content, resources, etc., even when the device uses 
multiple communication media and switches between such communication 
media. 
Regarding Claim 42, 

Murphy as modified by Aura discloses the computer readable 
storage medium of claim 41, in addition, Murphy discloses that 
determining at least one device signature further comprises, if a first level 
of trust is determined, determining a first tier device signature based, in 
part, on a hash of at least one of a subscription identifier, a gateway group 
identifier, a user agent identifier, and a time stamp (Column 9, line 22 to 
Column 10, line 64); and Aura discloses that determining at least one 
device signature further comprises, if a first level of trust is determined, 
determining a first tier device signature based, in part, on a hash of at 
least one of a subscription identifier, a gateway group identifier, a user 
agent identifier, and a time stamp (Column 9, line 43 to Column 10, line 
27; and Column 13, line 64 to Column 15, line 6). 
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Regarding Claim 43, 

Murphy as modified by Aura discloses the computer readable 
storage medium of claim 41 , in addition, Murphy discloses that 
determining at least one device signature further comprises, if a second 
level of trust is determined, determining a second tier device signature 
based, in part, on a hash of at least one of a cookie, a gateway group 
identifier, a user agent identifier, and a time stamp (Column 9, line 22 to 
Column 10, line 64); and Aura discloses that determining at least one 
device signature further comprises, if a second level of trust is determined, 
determining a second tier device signature based, in part, on a hash of at 
least one of a cookie, a gateway group identifier, a user agent identifier, 
and a time stamp (Column 9, line 43 to Column 10, line 27; and Column 
13, line 64 to Column 15, line 6). 

Regarding Claim 44, 

Murphy as modified by Aura discloses the computer readable 
storage medium of claim 41, in addition, Murphy discloses that 
determining at least one device signature further comprises, if a third level 
of trust is determined, determining a third tier device signature based, in 
part, on a hash of at least one of a gateway group identifier, a user agent 
identifier, a server identifier, a process identifier, a random number, and a 
time stamp (Column 9, line 22 to Column 10, line 64); and Aura discloses 
that determining at least one device signature further comprises, if a third 
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level of trust is determined, determining a third tier device signature 
based, in part, on a hash of at least one of a gateway group identifier, a 
user agent identifier, a server identifier, a process identifier, a random 
number, and a time stamp (Column 9, line 43 to Column 10, line 27; and 
Column 13, line 64 to Column 15, line 6). 

3. Claims 6, 7, 16, 17, and 34 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Murphy in.view of Aura, further in view of Laraki (U.S. Patent 
Application Publication 2003/0233329). 
Regarding Claim 6, 

Murphy as modified by Aura may not disclose that the associated 
information further comprises a subscription identifier associated with the 
mobile device that is based on at least one of a MIN, an ESN, and an 
application serial number. 

Laraki, however, discloses that the associated information further 
comprises a subscription identifier associated with the mobile device that 
is based on at least one of a MIN, an ESN, and an application serial 
number (Paragraph 53). It would have been obvious to one of ordinary 
skill in the art at the time of applicant's invention to incorporate the mobile 
subscription services system of Laraki into the session management 
system of Murphy as modified by Aura in order to efficiently provide 
mobile users with access to content based upon subscriptions and 
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affiliations in which a user will not be charged twice for content that was 
previously paid for, but could not be downloaded prior to expiration of the 
subscription, which is downloaded after expiration, thus improving 
reliability of the system. 
Regarding Claim 7, 

Murphy discloses that determining the at least one level of trust 
further comprises, if the associated information comprises a device 
identifier or trustworthy gateway information, determining a first level of 
trust (Column 9, line 22 to Column 10, line 64); and Aura discloses that 
determining the at least one level of trust further comprises, if the 
associated information comprises a device identifier or trustworthy 
gateway information, determining a first level of trust (Column 9, line 43 to 
Column 10, line 27; and Column 13, line 64 to Column 15, line 6); but may 
not disclose using both a device identifier and trustworthy gateway 
information to determine a first level of trust. 

Laraki, however, discloses using both a device identifier and 
trustworthy gateway information to determine a first level of trust 
(Paragraphs 46-48). It would have been obvious to one of ordinary skill in 
the art at the time of applicant's invention to incorporate the mobile 
subscription services system of Laraki into the session management 
system of Murphy as modified by Aura in order to efficiently provide 
mobile users with access to content based upon subscriptions and 
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affiliations in which a user will not be charged twice for content that was 
previously paid for, but could not be downloaded prior to expiration of the 
subscription, which is downloaded after expiration, thus improving 
reliability of the system. 

Regarding Claim 16, 

Murphy as modified by Aura may not disclose if the at least one 
device signature has expired, determining if the expired device signature 
is to be rolled over; and if the expired device signature is to be rolled over, 
extending a validity period associated with the expired device signature. 

Laraki, however, discloses, if the at least one device signature has 
expired, determining if the expired device signature is to be rolled over; 
and if the expired device signature is to be rolled over, extending a validity 
period associated with the expired device signature (Paragraphs 45 and 
66). It would have been obvious to one of ordinary skill in the art at the 
time of applicant's invention to incorporate the mobile subscription 
services system of Laraki into the session management system of Murphy 
as modified by Aura in order to efficiently provide mobile users with 
access to content based upon subscriptions and affiliations in which a 
user will not be charged twice for content that was previously paid for, but 
could not be downloaded prior to expiration of the subscription, which is 
downloaded after expiration, thus improving reliability of the system. 

Regarding Claim 17, 
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Murphy as modified by Aura and Laraki discloses the method of 
claim 16, in addition, Laraki discloses that determining if the expired 
device signature is to be rolled over further comprises evaluating at least 
one of a condition, event, change in an identifier indicating a grouping of 
the gateway, and a time (Paragraphs 45 and 66). 
Regarding Claim 34, 

Murphy discloses determining if at least one device signature has 
expired (Column 8, lines 24-28; and Column 17, lines 15-40); but may not 
disclose extending a validity period associated with the expired device 
signature if the expired device signature is to be rolled over. 

Laraki, however, discloses extending a validity period associated 
with the expired device signature if the expired device signature is to be 
rolled over (Paragraphs 45 and 66). It would have been obvious to one of 
ordinary skill in the art at the time of applicant's invention to incorporate 
the mobile subscription services system of Laraki into the session 
management system of Murphy as modified by Aura in order to efficiently 
provide mobile users with access to content based upon subscriptions and 
affiliations in which a user will not be charged twice for content that was 
previously paid for, but could not be downloaded prior to expiration of the 
subscription, which is downloaded after expiration, thus improving 
reliability of the system. 
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4. Claims 8, 18, 20-22, 24, 25, and 45 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Murphy in view of Aura, further in view of Wilf (U.S. Patent 
6,496,824). 

Regarding Claim 8, 

Murphy as modified by Aura discloses the method of claim 1, in 
addition, Murphy disclose determining the at least one level of trust further 
comprises, if the associated information contains a certain piece of 
information, determining a second level of trust (Column 9, line 22 to 
Column 10, line 64); but does not explicitly disclose that the certain piece 
of information is that the device is enabled to accept a cookie. 

Wilf, however, discloses information that indicates that the device is 
enabled to accept a cookie (Column 4, lines 5-35). It would have been 
obvious to one of ordinary skill in the art at the time of applicant's invention 
to incorporate the session management techniques of Wilf into the session 
management system of Murphy as modified by Aura in order to provide a 
stronger signature, based upon more client and/or gateway specific 
information, thus increasing security of the signature and making it harder 
to forge. 
Regarding Claim 18, 

Murphy discloses a client adapted for a device to communicate with 
a server over a network, the client being configured to perform actions 
comprising: 
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Sending a request to the server for content, wherein the request 
includes an identifier associated with the device (Column 9, line 22 to 
Column 10, line 64); and . 

Receiving at least one device signature associated with the device, 
wherein the at least one device signature is based on at least one level of 
trust, and is independent of user authentication (Column 9, line 22 to 
Column 10, line 64); 

But may not explicitly disclose that the device is a mobile device, a 
plurality of different levels of trust, and that the identifier associated with 
the device comprises an identifier associated with a user agent. 

Aura, however, discloses that the device is a mobile device and 
determining at least one level of trust from a plurality of different levels of 
trust based, in part, on associated information (Column 5, line 58 to 
Column 6, line 13; and Column 7, line 42 to Column 8, line 23). It would 
have been obvious to one of ordinary skill in the art at the time of 
applicant's invention to incorporate the mobile authentication system of 
Aura into the session management system of Murphy in order to allow a 
device to obtain authentication with new base stations and gateways with 
reduced delay, while allowing the device to maintain multiple levels of trust 
via credentials and signatures, such that the device can access multiple 
levels of access to content, resources, etc., even when the device uses 
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multiple communication media and switches between such communication 
media. 

Wilf, however, discloses that the identifier associated with the 
device comprises an identifier associated with a user agent (Column 4, 
lines 5-35). It would have been obvious to one of ordinary skill in the art at 
the time of applicant's invention to incorporate the session management 
techniques of Wilf into the session management system of Murphy as 
modified by Aura in order to provide a stronger signature, based upon 
more client and/or gateway specific information, thus increasing security of 
the signature and making it harder to forge. 
Regarding Claim 20, 

Murphy as modified by Aura and Wilf discloses the client of claim 
18, in addition, Murphy discloses that receiving the at least one device 
signature further comprises, if the at least one device signature is based 
on a first level of trust, receiving a first tier device signature based, in part, 
on a hash of at least one of a subscription identifier, a gateway group 
identifier, the user agent identifier, and a time stamp (Column 9, line 22 to 
Column 10, line 64); and Aura discloses that receiving the at least one 
device signature further comprises, if the at least one device signature is 
based on a first level of trust, receiving a first tier device signature based, 
in part, on a hash of at least one of a subscription identifier, a gateway 
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group identifier, the user agent identifier, and a time stamp (Column 9, line 
43 to Column 10, line 27; and Column 13, line 64 to Column 15, line 6). 

Regarding Claim 21, 

Murphy as modified by Aura and Wilf discloses the client of claim 
1 8, in addition, Murphy discloses that receiving the at least one device 
signature further comprises, if the at least one device signature is based 
on a second level of trust, receiving a second tier device signature based, 
in part, on a hash of at least one of a cookie, a gateway group identifier, 
the user agent identifier, and a time stamp (Column 9, line 22 to Column 
10, line 64); and Aura discloses that receiving the at least one device 
signature further comprises, if the at least one device signature is based 
on a second level of trust, receiving a second tier device signature based, 
in part, on a hash of at least one of a cookie, a gateway group identifier, 
the user agent identifier, and a time stamp (Column 9, line 43 to Column 
10, line 27; and Column 13, line 64 to Column 15, line 6). 

Regarding Claim 22, 

Murphy as modified by Aura and Wilf discloses the client of claim 
18, in addition, Murphy discloses that receiving the at least one device 
signature further comprises, if the at least one device signature is based 
on a third level of trust, receiving a third tier device signature based, in 
part, on a hash of at least one of a gateway group identifier, a user agent 
identifier, a server identifier, a process identifier, a random number, and a 
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time stamp (Column 9, line 22 to Column 10, line 64); and Aura discloses 
that receiving the at least one device signature further comprises, if the at 
least one device signature is based on a third level of trust, receiving a 
third tier device signature based, in part, on a hash of at least one of a 
gateway group identifier, a user agent identifier, a server identifier, a 
process identifier, a random number, and a time stamp (Column 9, line 43 
to Column 10, line 27; and Column 13, line 64 to Column 15, line 6). 

Regarding Claim 24, 

Murphy as modified by Aura and Wilf discloses the client of claim 
18, in addition, Wilf discloses that receiving the at least one device 
signature further comprises if the request indicates the mobile device is 
enabled to accept a cookie, associating the cookie with the at least one 
device signature (Column 4, lines 5-35). 

Regarding Claim 25, 

Murphy as modified by Aura and Wilf discloses the client of claim 
1 8, in addition, Murphy discloses that receiving the at least one device 
signature further comprises, associating a munged URL with the at least 
one device signature (Column 9, line 22 to Column 10, line 64). 

Regarding Claim 45, 

Murphy discloses an apparatus for communicating with a device, 
comprising: 
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A means for receiving a request from a device, wherein the request 
includes associated information (Column 9, line 22 to Column 10, line 64); 

A means for automatically determining a plurality of levels of trust 
based, in part, on the associated information (Column 9, line 22 to Column 
10, line 64); and 

A means for determining a plurality of different device signatures for 
the device based, in part, on the determined plurality of levels of trust, and 
independent of user authentication (Column 9, line 22 to Column 10, line 
64). 

But may not explicitly disclose that the device is a mobile device, a 
plurality of different levels of trust, or that the associated information 
indicates a capability of the mobile device. 

Aura, however, discloses that the device is a mobile device and 
determining at least one level of trust from a plurality of different levels of 
trust based, in part, on associated information (Column 5, line 58 to 
Column 6, line 13; and Column 7, line 42 to Column 8, line 23). It would 
have been obvious to one of ordinary skill in the art at the time of 
applicant's invention to incorporate the mobile authentication system of 
Aura into the session management system of Murphy in order to allow a 
device to obtain authentication with new base stations and gateways with 
reduced delay, while allowing the device to maintain multiple levels of trust 
via credentials and signatures, such that the device can access multiple 
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levels of access to content, resources, etc., even when the device uses 
multiple communication media and switches between such communication 
media. 

Wilf, however, discloses that the associated information indicates a 
capability of the mobile device (Column 4, lines 5-35). It would have been 
obvious to one of ordinary skill in the art at the time of applicant's invention 
to incorporate the session management techniques of Wilf into the session 
management system of Murphy as modified by Aura in order to provide a 
stronger signature, based upon more client and/or gateway specific 
information, thus increasing security of the signature and making it harder 
to forge. 

5. Claims 19 and 23 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Murphy in view of Aura and Wilf, further in view of Laraki. 
Regarding Claim 19, 

Murphy as modified by Aura and Wilf may not disclose providing a 
device identifier based on at least one of a MIN, ESN, and an application 
serial number. 

Laraki, however, discloses providing a device identifier based on at 
least one of a MIN, ESN, and an application serial number (Paragraph 
53). It would have been obvious to one of ordinary skill in the art at the 
time of applicant's invention to incorporate the mobile subscription 
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services system of Laraki into the session management system of Murphy 
as modified by Aura and Wilf in order to efficiently provide mobile users 
with access to content based upon subscriptions and affiliations in which a 
user will not be charged twice for content that was previously paid for, but 
could not be downloaded prior to expiration of the subscription, which is 
downloaded after expiration, thus improving reliability of the system. 
Regarding Claim 23, 

Murphy as modified by Aura and Wilf discloses the client of claim 
18, in addition, Murphy discloses data in the form of at least one device 
signature (Column 9, line 22 to Column 10, line 64); but may not disclose 

Laraki, however, discloses that sending the request further 
comprises sending the request to a carrier gateway, wherein the carrier 
gateway is configured to perform actions comprising: modifying the 
request to include at least one of a subscription identifier associated with 
the mobile device, and a gateway identifier; forwarding the modified 
request to the server; receiving data from the server; and forwarding the 
data to the mobile device (Paragraphs 33-37 and 46-48). It would have 
been obvious to one of ordinary skill in the art at the time of applicant's 
invention to incorporate the mobile subscription services system of Laraki 
into the session management system of Murphy as modified by Aura and 
Wilf in order to efficiently provide mobile users with access to content 
based upon subscriptions and affiliations in which a user will not be 



Application/Control Number: 10/767,004 Page 32 

Art Unit: 2137 

charged twice for content that was previously paid for, but could not be 
downloaded prior to expiration of the subscription, which is downloaded 
after expiration, thus improving reliability of the system. 



Conclusion 

Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 
§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Jeffrey D. Popham whose telephone number is (571)- 
272-7215. The examiner can normally be reached on M-F 9:00-5:30. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Emmanuel Moise can be reached on (571)272-3865. The fax phone 
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number for the organization where this application or proceeding is assigned is 571- 
273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic' 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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Examiner 
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